Pass My CCIE Exam in first attempt. Exam combo: TS1, DIAG2, H3
TS1
Q1 The VLAN 200 interface on SW1 is equipped with ACL.
Q2 R17 is not configured with PPP, and can be configured according to the account password of R12.
Q3 Checked a circle only the neighbors between R22 and R5 did not rise. The E0/0 port on R22 has ACL. The difference here is that this part of OSPF is directly "network /8"
Q4 R12: EIGRP no “pass e1/0”
Q5 Basic error, peacetime practice, MPLS is not configured in R2 E0/0, there is a problem with the direction of "route-map" on R21, and there is a problem with setting the metric value for "route-map" on R4 and R6.
Q6 R22 is configured with "route-map NH" for ipv6 neighbors under the ipv4 address cluster.
The next hop configuration in "route-map" is fine. R25 does not activate neighbors under the ipv6 address cluster.
Q7 Only the DMVPN on the R18 is not up. After checking, the ACL on the S4/0 interface on the R14 does not release the "esp" traffic, and the R17-19 tu0 configures the "ip nhrp short".
Q8 R104 does not obtain an IP address. Check the SW3 configuration and add the corresponding interface in OSPF. The R7 outbound interface is not configured with "ip nat out", the main line is connected. Test the backup line back to R4 and go OSPF domain instead of MPLS, increase OSPF overhead on R4, R6 E2/0. The R8 inbound interface is not configured with "ip nat in", the backup line is connected, and then turn on the main line .
Q9 S4/0 on R21 has ACL not released ip traffic, release.
Q10 The NAS did not obtain an IP address. Check the corresponding configuration on R23 and change the "client-id".
D2: Same as SPOTO
H3
Sec1: The difference between the server IOUs practiced in peacetime is that many access points on the access layer switch are configured with 2-4 access ports, and only VLANs are assigned. There is no "sw mo ac" configured. SW300-301,310 has "no span mst simulate pvst global" configuration, deleted on SW300-301, otherwise there will be an interface in the block state, other problems. EC is the same as our usual practice, the up is very smooth, R70 PPPOE up very quickly
Sec2.1: Same as SPOTO
Sec2.2: Same as SPOTO
Sec2.3: Same as SPOTO
Sec2.4+2.5: Same as SPOTO
Sec2.6: Same as SPOTO
Sec2.7-2.9: Same as SPOTO
Sec2.10: Same as SPOTO
Sec2.11: Same as SPOTO. I also hanged the ACL in the R10-11 in direction. At the same time, there is a phenomenon diagram that requires the address of SW100 E0/2 on R13, and "ip pim send-rp-a lo1 sco 255 grou 1" in SW100-101," Ip pim send-rp-d e0/2 sco 255". Another step is to announce the /30 network segment of this interface in the bgp of SW100.
Sec3.1: (Same as SPOTO) According to the BGP map of the test, you need to establish an ipv4 and vpnv4 neighbor.
Sec3.2: (Same as SPOTO).
Sec3.3-3.4: (Same as SPOTO)
Sec4: (Same as SPOTO)
Sec5: (Same as SPOTO). The test center can be equipped with "dot1dBridge", but it is best to remember "1.3.6.1.2.1.17". The QoS part has not changed; the ipv6 part has not changed; the last HSRP is fine as long as the previous "spanning-tree" pit is drained.
Thanks SPOTO, thanks tutor and bro in the SPOTO CCIE Club, and hope all of you can pass your lab exam.
Q1 The VLAN 200 interface on SW1 is equipped with ACL.
Q2 R17 is not configured with PPP, and can be configured according to the account password of R12.
Q3 Checked a circle only the neighbors between R22 and R5 did not rise. The E0/0 port on R22 has ACL. The difference here is that this part of OSPF is directly "network /8"
Q4 R12: EIGRP no “pass e1/0”
Q5 Basic error, peacetime practice, MPLS is not configured in R2 E0/0, there is a problem with the direction of "route-map" on R21, and there is a problem with setting the metric value for "route-map" on R4 and R6.
Q6 R22 is configured with "route-map NH" for ipv6 neighbors under the ipv4 address cluster.
The next hop configuration in "route-map" is fine. R25 does not activate neighbors under the ipv6 address cluster.
Q7 Only the DMVPN on the R18 is not up. After checking, the ACL on the S4/0 interface on the R14 does not release the "esp" traffic, and the R17-19 tu0 configures the "ip nhrp short".
Q8 R104 does not obtain an IP address. Check the SW3 configuration and add the corresponding interface in OSPF. The R7 outbound interface is not configured with "ip nat out", the main line is connected. Test the backup line back to R4 and go OSPF domain instead of MPLS, increase OSPF overhead on R4, R6 E2/0. The R8 inbound interface is not configured with "ip nat in", the backup line is connected, and then turn on the main line .
Q9 S4/0 on R21 has ACL not released ip traffic, release.
Q10 The NAS did not obtain an IP address. Check the corresponding configuration on R23 and change the "client-id".
D2: Same as SPOTO
H3
Sec1: The difference between the server IOUs practiced in peacetime is that many access points on the access layer switch are configured with 2-4 access ports, and only VLANs are assigned. There is no "sw mo ac" configured. SW300-301,310 has "no span mst simulate pvst global" configuration, deleted on SW300-301, otherwise there will be an interface in the block state, other problems. EC is the same as our usual practice, the up is very smooth, R70 PPPOE up very quickly
Sec2.1: Same as SPOTO
Sec2.2: Same as SPOTO
Sec2.3: Same as SPOTO
Sec2.4+2.5: Same as SPOTO
Sec2.6: Same as SPOTO
Sec2.7-2.9: Same as SPOTO
Sec2.10: Same as SPOTO
Sec2.11: Same as SPOTO. I also hanged the ACL in the R10-11 in direction. At the same time, there is a phenomenon diagram that requires the address of SW100 E0/2 on R13, and "ip pim send-rp-a lo1 sco 255 grou 1" in SW100-101," Ip pim send-rp-d e0/2 sco 255". Another step is to announce the /30 network segment of this interface in the bgp of SW100.
Sec3.1: (Same as SPOTO) According to the BGP map of the test, you need to establish an ipv4 and vpnv4 neighbor.
Sec3.2: (Same as SPOTO).
Sec3.3-3.4: (Same as SPOTO)
Sec4: (Same as SPOTO)
Sec5: (Same as SPOTO). The test center can be equipped with "dot1dBridge", but it is best to remember "1.3.6.1.2.1.17". The QoS part has not changed; the ipv6 part has not changed; the last HSRP is fine as long as the previous "spanning-tree" pit is drained.
Thanks SPOTO, thanks tutor and bro in the SPOTO CCIE Club, and hope all of you can pass your lab exam.
评论
发表评论